Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: zvt79pUOs+Tb02BD8b2x+tzin4Mdwen81wK53u4rlCE=
Subject key identifier: FB:05:62:96:F1:3C:FB:79:24:15:EA:85:F9:82:68:1B:EF:0B:1A:57
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 0194BCE0EF7B84E0DADAC0A4C1A8E5BBED47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 10A2
Signing time: Fri 31 Jan 2025 15:00:45 +0000
Manifest this update: Fri 31 Jan 2025 15:00:45 +0000
Manifest next update: Sat 01 Feb 2025 15:00:45 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: NfIBoswmwwDHVhKeX9653nYWj2t0yQ+DJS5GbgL1B+o=)
3: TgX6Ahejr8dFzzFT1WSFiJRu3Do.roa (hash: htkxM3uRu+UJ0kbLuQsKy6qnAb8htaldVtC4MZ15XTI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ef:7b:84:e0:da:da:c0:a4:c1:a8:e5:bb:ed:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Jan 31 15:00:45 2025 GMT
Not After : Feb 1 15:00:45 2025 GMT
Subject: CN=fb056296f13cfb792415ea85f982681bef0b1a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:dc:8a:63:2e:4a:e0:57:10:bf:af:06:8c:
cb:28:72:79:4a:94:b8:9e:88:d5:fc:48:63:9e:d1:
cf:da:4d:3d:0a:ce:3c:92:79:5d:5c:0f:04:46:96:
32:2b:f7:be:5a:2d:49:6a:fd:05:61:27:c6:51:35:
2f:b8:5f:0f:6a:ea:24:09:84:0d:04:0b:d6:f8:32:
ce:8a:42:1c:b1:4c:bf:bc:82:44:5a:14:a9:85:d1:
be:ef:aa:7b:3e:43:bc:f1:b4:6d:09:36:f7:52:99:
0c:6f:a6:58:97:dd:a7:21:c2:3e:b2:0a:5c:97:2c:
da:82:20:f7:15:c8:8d:a0:a8:2f:d4:dd:6a:7f:45:
3d:24:65:a0:ec:1d:7d:1b:b5:db:ac:96:ba:51:c5:
a1:71:93:bc:1d:02:88:8e:5f:7c:65:4c:fb:6a:a6:
09:7c:ac:7c:ca:65:de:aa:77:13:6f:4e:ea:e3:2c:
98:09:83:b0:95:b0:d3:ab:a5:fd:2a:0c:ff:a1:fb:
c8:2a:57:58:d3:a9:ee:15:9d:2b:32:19:10:cb:dc:
d7:b7:c4:9a:54:00:cd:87:cc:8f:d6:ba:c9:37:4a:
0e:19:d5:72:b9:67:41:16:84:37:5d:62:14:0e:80:
70:01:fe:48:12:a5:3d:5d:44:c2:d7:05:e9:3a:d0:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:62:96:F1:3C:FB:79:24:15:EA:85:F9:82:68:1B:EF:0B:1A:57
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:d4:7c:b3:49:6d:db:5b:ee:be:0b:e5:3e:d0:79:ee:9c:
b4:54:0c:73:6b:31:32:89:77:c9:4f:1f:29:1e:a1:63:55:3f:
03:00:82:da:0d:01:6d:76:1d:c0:34:d1:3f:74:d7:f4:96:d6:
39:d1:51:ab:42:b5:f7:da:ca:22:dd:32:4c:fd:bd:f8:05:04:
02:28:04:51:4c:44:90:8f:8e:31:01:15:d2:b9:f2:4d:6c:6d:
bd:5b:68:e0:fe:f9:27:26:5c:b5:83:c1:4a:b7:5e:12:75:70:
03:6b:6c:7d:77:ba:7d:b7:5c:2d:ca:e8:f2:77:94:a7:fe:a8:
f4:d7:5b:38:36:76:68:8d:59:5f:5a:5c:99:69:9b:69:ea:55:
91:fa:99:57:21:eb:9d:2d:b2:36:96:d9:fa:9d:47:36:a9:20:
02:25:ef:fa:8a:d8:21:f8:54:0b:29:1f:51:d5:1c:dc:42:0f:
4e:8d:c2:a5:85:0c:93:0c:4c:6d:7e:56:36:1d:8a:8d:c6:75:
92:dd:d5:88:4e:17:44:ff:69:48:36:e5:34:8a:6f:da:9a:e2:
7b:5a:27:68:cc:9e:67:b7:be:2f:7c:57:3d:43:13:be:f7:5d:
13:e5:dc:24:76:09:47:56:b7:78:00:7b:8d:37:27:9a:7a:24:
e2:9b:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:48 2025 by rpki-client